3. AlSuite access control mechanisms

3.1       Access control mechanism 
AlSuite has a very flexible access control mechanism. On the one hand, you are able to specify the units that a user can access, irrespective of access rights granted to them. On the other hand, you are able to specify access rights using roles. This relationship is depicted in Fig. 1 below.
Figure 1 AlSuite user acces control mechanism

You will get a better understanding of the interrelationship of the different components as you progress with the configuration of the application. Let’s now delve into the System Administration module.

3.2       AlSuite unit and unit types
Units in AlSuite can be looked at as Departments. However, there are different unit types and some rules around the number of units you can create, which we would like to present in this section.

Each unit is linked to a “unit type”, which determines the features present in a unit. The application has six unit types: System Administration, Approvals, Accounts, Data sets, Operations and Reporting as shown in Fig. 2 below.

Figure 2: Overview of AlSuite Units

Apart from the unit type “Operations”, which permits the creation of as many units under it as you require, all the other units permit the creation of only one unit under them.

Here we explain the necessity and features of each unit type:

System Administrator: This is the main administration unit of the application. It is the first unit you will have to configure before beginning to configure subsequent sections of the application. This unit is used for managing users including user invitations and user roles, creating other units and handling subscriptions.

Approvals: This unit is used for managing approval settings and approvals. Approval settings determine who should be able to approve what in AlSuite; including the approval of activity plans, requisitions and field reports.

Accounts: This unit enables to creation of clients, chart of account (CoA), projects and budgets including budget spread. It is also in this unit that bookings of requisitions and funds release is handled in operations.

Data sets: This unit is used for managing monitoring and evaluation (M&E) data of the organization, including outcomes, outputs, indicators, milestones etc. This is a very critical unit that establishes the linage between accounts and operations. On the one hand, projects defined in the Accounts unit are linked to Outcomes in the Data Set unit. On the other hand, the work plans and targets in the Operations unit links to the Data sets unit to allow for tracking of progress towards outcomes and outputs in execution. 

Operations: This unit type permits the creation of many units under it. You can look at this unit type as an operations department in an organization. It is in units under this unit type that work plans and targets are defined creating a linkage to outputs in the Data Sets unit; and activity plans and field reports are raised for execution. 

Reporting: This is the analytics unit, where reports can be analyzed in a compact environment. Beyond this unit dedicated to reporting, each unit in AlSuite has a dedicated dashboard with data pertinent to that unit type. 

Did this solve your problem?